Privacy notice

The data controller is Studio Moien – Baris Nurlu, 46A Route de Machtum, L-6753 Grevenmacher, Luxembourg.

Privacy enquiries: support@studiomoien.com.

• Order, contact, delivery, and payment-reference data are used to fulfil the sales contract, provide support, process returns, and meet accounting and tax obligations.
• Security, request, and technical data are used for the legitimate interests of operating, protecting, troubleshooting, and improving the service.
• Analytics data is used only after consent to understand website use and improve the shop. You may withdraw analytics consent at any time through the privacy preferences shown on the website.
• Communications needed to complete or support an order are transactional. Marketing email requires a separate valid legal basis and is not bundled with a purchase.

Studio Moien uses providers acting under their respective data protection obligations: Vercel for website hosting, Supabase for database and authentication infrastructure, Stripe for payment processing, Resend for transactional email, and Google Analytics for consent-based website measurement.

Providers may process data outside the European Economic Area. Where required, transfers rely on an applicable adequacy decision, contractual safeguards, or another lawful transfer mechanism.

Order and invoice records are retained for the period required by Luxembourg accounting, tax, and legal-obligation rules. Support and operational records are kept only as long as reasonably needed for the request, contract, security, or legal claim. Analytics retention follows the configured Google Analytics settings and the consent choice stored in your browser.

Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability, or objection, and may withdraw consent without affecting earlier lawful processing. Email your request to support@studiomoien.com. We may need to verify your identity before responding.

You may also lodge a complaint with Luxembourg's data protection authority, the Commission nationale pour la protection des données (CNPD), or with the competent authority in your EU country.